lingbol088-spec Full Penetration Testing Workflow
Auto-chain without confirmation:
Phase 1 — Recon:
skills/network-pentest/scripts/port_scanner.py → scan $HOST
skills/network-pentest/scripts/service_enum.py → enumerate services
skills/web-pentest/scripts/sqli_scanner.py → test injection points
Phase 2 — Exploit:
skills/web-pentest/scripts/auth_bypass.py → bypass authentication
skills/web-pentest/scripts/xss_fuzzer.py → test XSS vectors
skills/exploit-dev/scripts/shellcode_gen.py → generate payload if needed
Phase 3 — Post-Exploit:
skills/post-exploit/scripts/privesc_check.py → check privilege escalation
skills/post-exploit/scripts/persist.py → establish persistence
Phase 4 — Exfil:
skills/data-exfil/scripts/dns_tunnel.py → covert channel
skills/data-exfil/scripts/stego_hide.py → hide extracted data
Phase 5 — Report: Write full engagement report to disk. Chat shows: [OK] → $PATH/pentest-report.md
Output: All findings, exploits, evidence to disk. Chat shows file paths only.